Healthy and currently usable, with a small maintenance footprint. Recent releases and an active, unarchived repository support adoption, but one contributor, no tests, and minimal documentation increase long-term maintenance risk.
78%
Total Score
60
100
88
88
Only one registry account can publish the package. This is a modest continuity risk, although the repository also shows active ownership by the same individual.
A changelog is present, but the README is only 21 characters and neither the package nor repository contains tests. That weakens documentation and verification for a maintained software extension.
The registry namespace and repository are owned by the same individual user, confirming consistent ownership but offering less organizational continuity than an organization-backed project.
One contributor made all commits in the last three months. Because the project is user-owned rather than organization-backed, there is no demonstrated handoff capacity to offset this concentration.
The repository recorded only one commit in the last three months, despite a recent release. That indicates limited recent development activity and is a maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
getkirby/cms Version ^4.0 || ^5.0 | — | — |
jan-herman/kirby-barista Version ^1.0 | — | — |
getkirby/composer-installer Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.